CVE-2022-0666
Assigner: @huntrdev
Published: 2022-02-18T14:55:12
State: PUBLISHED
affected: product: microweber/microweber
vendor: microweber
versions: lessThan: 1.2.11
status: affected
version: unspecified
versionType: custom
descriptions: value: CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
version: 3.0
problemTypes: descriptions: cweId: CWE-93
description: CWE-93 Improper Neutralization of CRLF Sequences
type: CWE
source: advisory: 7215afc7-9133-4749-8e8e-0569317dbd55
discovery: EXTERNAL
title:  CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber